CVE-2018-4945

Adobe Flash Player CVE-2018-4945 is a Type Confusion vulnerability affecting Flash Player up to version 29.0.0.171. The vulnerability could allow arbitrary code execution in the context of the current user when a crafted Flash file is processed. Public advisories and vendor patches confirm that u...

CVE-2018-5001

CVE-2018-5001 describes an out-of-bounds read in Adobe Flash Player prior to version 30.0.0.113, leading to information disclosure. Connected advisories (Arch Linux ASA-201806-7, FreeBSD VUXML 2DDE5A56, CVE listings) confirm the vulnerability affects Flash Player before 30.0.0.113 and is mitigate...

CVE-2018-5000

CVE-2018-5000 affects Adobe Flash Player up to version 30.0.0.113 (and earlier 29.0.0.171). The vulnerability is an integer overflow in Flash Player that could lead to information disclosure. Public advisories and vendor notes reference an update to 30.0.0.113 (or later) as the remediation. Sever...

CVE-2018-5001

Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-5002

Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value:...

VLC media player 2.2.8 - Arbitrary Code Execution (PoC)

VLC media player 2.2.8 - Arbitrary Code Execution PoC Exploit Title: VLC media player 2.2.8 - Arbitrary Code Execution PoC Date: 2018-06-06 Exploit Author: Eugene Ng Vendor Homepage: https://www.videolan.org/vlc/index.html Software Link:...

VLC media player 2.2.8 - Arbitrary Code Execution (PoC)

Exploit Title: VLC media player 2.2.8 - Arbitrary Code Execution PoC Date: 2018-06-06 Exploit Author: Eugene Ng Vendor Homepage: https://www.videolan.org/vlc/index.html Software Link: http://download.videolan.org/pub/videolan/vlc/2.2.8/win64/vlc-2.2.8-win64.exe Version: 2.2.8 Tested on: Windows 1...

RealOne Player Denial of Service Vulnerability

RealOne Player is a Media Player software developed and maintained by Real. A security vulnerability exists in RealOne Player version 2.0 Build 6.0.11.872. The vulnerability can be exploited by remote attackers to cause a denial of service array out-of-bounds access and application crash via...

CVE-2018-13121

RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service array out-of-bounds access and application crash via a crafted .aiff file...

Design/Logic Flaw

RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service array out-of-bounds access and application crash via a crafted .aiff file...

CVE-2018-13121

RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service array out-of-bounds access and application crash via a crafted .aiff file...

CVE-2018-13121

CVE-2018-13121 affects RealOne Player 2.0 Build 6.0.11.872, where processing a specially crafted .aiff file can cause a denial of service via array out-of-bounds access, resulting in an application crash. The entry documents this vulnerability and provides CVSS metrics (CVSS2: 4.3/10; CVSS3: 5.5/...

CVE-2018-13121

RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service array out-of-bounds access and application crash via a crafted .aiff file...

CVE-2018-5435

The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple...

CVE-2018-12905

joyplus-cms 1.6.0 has XSS in adminplayer.php, related to manager/index.php "system manage" and "add" actions...

[SECURITY] Fedora 27 Update: timidity++-2.14.0-16.fc27

TiMidity++ is a MIDI format to wave table format converter and player. Install timidity++ if you'd like to play MIDI files and your sound card does not natively support wave table format...

MGASA-2018-0286 Updated flash-player-plugin packages fixes security issues

Updated flash-player-plugin packages fixes the following security issues A remote attacker could possibly execute arbitrary code with the privileges of the process or obtain sensitive information CVE-2018-4945, CVE-2018-5000, CVE-2018-5001, CVE-2018-5002. In response to a class of recently...

Updated flash-player-plugin packages fixes security issues

Updated flash-player-plugin packages fixes the following security issues A remote attacker could possibly execute arbitrary code with the privileges of the process or obtain sensitive information CVE-2018-4945, CVE-2018-5000, CVE-2018-5001, CVE-2018-5002. In response to a class of recently...

Western Digital TV Media Player and TV Live Hub Uncertified RCE Vulnerability

Western Digital TV Media Player and TV Live Hub are both multimedia player products from Western Digital. A security vulnerability exists in Western Digital TV Media Player version 1.03.07 and TV Live Hub version 3.12.13. A remote attacker can exploit this vulnerability by sending a specially...

GLSA-201806-02 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201806-02 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...